@highflame/policy 2.2.42 → 2.2.43

package/dist/service-schemas.gen.js

@@ -140,6 +140,44 @@ namespace AgentOps {
     // Context Types (Action-Specific)
     // =========================================================================
 
+    /// The ZeroID NHI principal block (ADR 0009 / CAP-IDN-011).
+    ///
+    /// A record, not a string: Shield projects the whole identity block under
+    /// \`context.principal\`, so policies read members off it —
+    ///
+    ///   permit ... when { context has principal &&
+    ///                     context.principal.trust_level == "first_party" };
+    ///   forbid ... unless { context has principal &&
+    ///                       context.principal has act_sub };
+    ///
+    /// Declared once and shared by every action context so a new member cannot
+    /// land on one action and go missing on another.
+    ///
+    /// \`act\` (RFC 8693 delegation) is flattened to \`act_sub\` / \`act_iss\`
+    /// because Cedar records are flat key/value at each level; the full
+    /// delegation tree is reconstructable audit-side by joining on \`mission_id\`.
+    ///
+    /// Every member is optional except \`delegation_depth\`: the projector omits
+    /// a field whose value is empty, but always emits the depth because zero is
+    /// the meaningful base case for a direct (non-delegated) token. The record
+    /// itself is optional — it is absent, not empty, when the request carries no
+    /// NHI claims (RS256 human tokens, internal-service callers), so
+    /// \`context has principal\` is false rather than true-but-empty.
+    type PrincipalContext = {
+        "identity_type"?: String,      // "human" | "agent" | "service" | "mcp_server"
+        "sub_type"?: String,           // Identity subtype (e.g. "coding_agent")
+        "trust_level"?: String,        // "first_party" | "verified" | "unverified"
+        "framework"?: String,          // Agent framework (e.g. "langchain")
+        "publisher"?: String,          // Agent publisher
+        "capabilities"?: Set<String>,  // Capabilities granted to the identity
+        "scopes"?: Set<String>,        // OAuth scopes carried by the token
+        "delegation_depth": Long,      // Delegation hops; 0 for a direct token
+        "act_sub"?: String,            // RFC 8693 actor — the accountable human
+        "act_iss"?: String,            // Issuer of the actor claim
+        "mission_id"?: String,         // Correlates one delegation tree
+        "grant_type"?: String,         // How the token was obtained (e.g. "api_key")
+    };
+
     /// Context for the process_response action.
     ///
     /// An alias, not a copy: prompts and responses are inspected by the same
@@ -154,7 +192,7 @@ namespace AgentOps {
         "role"?: String,
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,        // Principal identity class: "human" | "agent" | "service" | "mcp_server"
-        "principal"?: String,            // Stable principal identifier (e.g. ZeroID / WIMSE URI or user id)
+        "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -349,7 +387,7 @@ namespace AgentOps {
         "role"?: String,
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,
-        "principal"?: String,
+        "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -560,7 +598,7 @@ namespace AgentOps {
         "role"?: String,
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,
-        "principal"?: String,
+        "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -668,7 +706,7 @@ namespace AgentOps {
         "role"?: String,
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,
-        "principal"?: String,
+        "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -780,7 +818,7 @@ namespace AgentOps {
         "role"?: String,
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,
-        "principal"?: String,
+        "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -913,7 +951,7 @@ namespace AgentOps {
         "role"?: String,
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,        // Principal identity class: "human" | "agent" | "service" | "mcp_server"
-        "principal"?: String,            // Stable principal identifier (ZeroID / WIMSE URI or user id)
+        "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
         "agent_trust_level"?: String,    // "untrusted" | "low" | "verified" | "trusted"
 
         // Core metadata (required)
@@ -1687,6 +1725,44 @@ namespace Guardrails {
     // Context Types (Action-Specific)
     // =========================================================================
 
+    /// The ZeroID NHI principal block (ADR 0009 / CAP-IDN-011).
+    ///
+    /// A record, not a string: Shield projects the whole identity block under
+    /// \`context.principal\`, so policies read members off it —
+    ///
+    ///   permit ... when { context has principal &&
+    ///                     context.principal.trust_level == "first_party" };
+    ///   forbid ... unless { context has principal &&
+    ///                       context.principal has act_sub };
+    ///
+    /// Declared once and shared by every action context so a new member cannot
+    /// land on one action and go missing on another.
+    ///
+    /// \`act\` (RFC 8693 delegation) is flattened to \`act_sub\` / \`act_iss\`
+    /// because Cedar records are flat key/value at each level; the full
+    /// delegation tree is reconstructable audit-side by joining on \`mission_id\`.
+    ///
+    /// Every member is optional except \`delegation_depth\`: the projector omits
+    /// a field whose value is empty, but always emits the depth because zero is
+    /// the meaningful base case for a direct (non-delegated) token. The record
+    /// itself is optional — it is absent, not empty, when the request carries no
+    /// NHI claims (RS256 human tokens, internal-service callers), so
+    /// \`context has principal\` is false rather than true-but-empty.
+    type PrincipalContext = {
+        "identity_type"?: String,      // "human" | "agent" | "service"
+        "sub_type"?: String,           // Identity subtype (e.g. "coding_agent")
+        "trust_level"?: String,        // "first_party" | "verified" | "unverified"
+        "framework"?: String,          // Agent framework (e.g. "langchain")
+        "publisher"?: String,          // Agent publisher
+        "capabilities"?: Set<String>,  // Capabilities granted to the identity
+        "scopes"?: Set<String>,        // OAuth scopes carried by the token
+        "delegation_depth": Long,      // Delegation hops; 0 for a direct token
+        "act_sub"?: String,            // RFC 8693 actor — the accountable human
+        "act_iss"?: String,            // Issuer of the actor claim
+        "mission_id"?: String,         // Correlates one delegation tree
+        "grant_type"?: String,         // How the token was obtained (e.g. "api_key")
+    };
+
     /// Context for the process_response action.
     ///
     /// An alias, not a copy: prompts and responses are inspected by the same
@@ -1703,7 +1779,7 @@ namespace Guardrails {
         "role"?: String,
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,        // Principal identity class: "human" | "agent" | "service"
-        "principal"?: String,            // Stable principal identifier (e.g. ZeroID / WIMSE URI or user id)
+        "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -1855,7 +1931,7 @@ namespace Guardrails {
         "role"?: String,
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,        // Principal identity class: "human" | "agent" | "service"
-        "principal"?: String,            // Stable principal identifier (e.g. ZeroID / WIMSE URI or user id)
+        "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -2051,7 +2127,7 @@ namespace Guardrails {
         "role"?: String,
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,        // Principal identity class: "human" | "agent" | "service"
-        "principal"?: String,            // Stable principal identifier (e.g. ZeroID / WIMSE URI or user id)
+        "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -2124,7 +2200,7 @@ namespace Guardrails {
         "role"?: String,
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,        // Principal identity class: "human" | "agent" | "service"
-        "principal"?: String,            // Stable principal identifier (e.g. ZeroID / WIMSE URI or user id)
+        "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -2201,7 +2277,7 @@ namespace Guardrails {
         "role"?: String,
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,        // Principal identity class: "human" | "agent" | "service"
-        "principal"?: String,            // Stable principal identifier (e.g. ZeroID / WIMSE URI or user id)
+        "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -3470,7 +3546,6 @@ export const AGENT_OPS_CONTEXT = {
                 { "key": "role", "type": "string", "required": false, "description": "Caller\'s RBAC role projected from the principal\'s token (AARM R6 / CAP-IDN-011)" },
                 { "key": "privilege_scope", "type": "array", "required": false, "description": "Privilege-scope strings granted to the caller, projected from the token (AARM R6 / CAP-IDN-011)" },
                 { "key": "identity_type", "type": "string", "required": false, "description": "Principal identity class projected from the token: \'human\', \'agent\', \'service\', or \'mcp_server\'" },
-                { "key": "principal", "type": "string", "required": false, "description": "Stable principal identifier projected from the token (e.g. a ZeroID / WIMSE URI or user id)" },
                 { "key": "request_id", "type": "string", "required": true, "description": "Unique identifier for this request, useful for audit trails and debugging" },
                 { "key": "timestamp", "type": "number", "required": true, "description": "Unix timestamp in milliseconds when the request was processed" },
                 { "key": "direction", "type": "string", "required": true, "description": "Content flow direction: \'input\' for user prompts, \'output\' for AI responses" },
@@ -3601,7 +3676,6 @@ export const AGENT_OPS_CONTEXT = {
                 { "key": "role", "type": "string", "required": false, "description": "Caller\'s RBAC role projected from the principal\'s token (AARM R6 / CAP-IDN-011)" },
                 { "key": "privilege_scope", "type": "array", "required": false, "description": "Privilege-scope strings granted to the caller, projected from the token (AARM R6 / CAP-IDN-011)" },
                 { "key": "identity_type", "type": "string", "required": false, "description": "Principal identity class projected from the token: \'human\', \'agent\', \'service\', or \'mcp_server\'" },
-                { "key": "principal", "type": "string", "required": false, "description": "Stable principal identifier projected from the token (e.g. a ZeroID / WIMSE URI or user id)" },
                 { "key": "request_id", "type": "string", "required": true, "description": "Unique identifier for this request, useful for audit trails and debugging" },
                 { "key": "timestamp", "type": "number", "required": true, "description": "Unix timestamp in milliseconds when the request was processed" },
                 { "key": "direction", "type": "string", "required": true, "description": "Content flow direction: \'input\' for user prompts, \'output\' for AI responses" },
@@ -3732,7 +3806,6 @@ export const AGENT_OPS_CONTEXT = {
                 { "key": "role", "type": "string", "required": false, "description": "Caller\'s RBAC role projected from the principal\'s token" },
                 { "key": "privilege_scope", "type": "array", "required": false, "description": "Privilege-scope strings granted to the caller" },
                 { "key": "identity_type", "type": "string", "required": false, "description": "Principal identity class: \'human\', \'agent\', \'service\', or \'mcp_server\'" },
-                { "key": "principal", "type": "string", "required": false, "description": "Stable principal identifier" },
                 { "key": "request_id", "type": "string", "required": true, "description": "Unique identifier for this request" },
                 { "key": "timestamp", "type": "number", "required": true, "description": "Unix timestamp in milliseconds" },
                 { "key": "source", "type": "string", "required": false, "description": "Traffic origin: \'ide\' | \'cli\' | \'api\' | \'browser\'" },
@@ -3860,7 +3933,6 @@ export const AGENT_OPS_CONTEXT = {
                 { "key": "role", "type": "string", "required": false, "description": "Caller\'s RBAC role projected from the principal\'s token" },
                 { "key": "privilege_scope", "type": "array", "required": false, "description": "Privilege-scope strings granted to the caller" },
                 { "key": "identity_type", "type": "string", "required": false, "description": "Principal identity class: \'human\', \'agent\', \'service\', or \'mcp_server\'" },
-                { "key": "principal", "type": "string", "required": false, "description": "Stable principal identifier" },
                 { "key": "request_id", "type": "string", "required": true, "description": "Unique identifier for this request" },
                 { "key": "timestamp", "type": "number", "required": true, "description": "Unix timestamp in milliseconds" },
                 { "key": "source", "type": "string", "required": false, "description": "Traffic origin: \'ide\' | \'cli\' | \'api\' | \'browser\'" },
@@ -3927,7 +3999,6 @@ export const AGENT_OPS_CONTEXT = {
                 { "key": "role", "type": "string", "required": false, "description": "Caller\'s RBAC role projected from the principal\'s token" },
                 { "key": "privilege_scope", "type": "array", "required": false, "description": "Privilege-scope strings granted to the caller" },
                 { "key": "identity_type", "type": "string", "required": false, "description": "Principal identity class: \'human\', \'agent\', \'service\', or \'mcp_server\'" },
-                { "key": "principal", "type": "string", "required": false, "description": "Stable principal identifier" },
                 { "key": "request_id", "type": "string", "required": true, "description": "Unique identifier for this request" },
                 { "key": "timestamp", "type": "number", "required": true, "description": "Unix timestamp in milliseconds" },
                 { "key": "source", "type": "string", "required": false, "description": "Traffic origin: \'ide\' | \'cli\' | \'api\' | \'browser\'" },
@@ -3996,7 +4067,6 @@ export const AGENT_OPS_CONTEXT = {
                 { "key": "role", "type": "string", "required": false, "description": "Caller\'s RBAC role projected from the principal\'s token" },
                 { "key": "privilege_scope", "type": "array", "required": false, "description": "Privilege-scope strings granted to the caller" },
                 { "key": "identity_type", "type": "string", "required": false, "description": "Principal identity class: \'human\', \'agent\', \'service\', or \'mcp_server\'" },
-                { "key": "principal", "type": "string", "required": false, "description": "Stable principal identifier" },
                 { "key": "request_id", "type": "string", "required": true, "description": "Unique identifier for this request" },
                 { "key": "timestamp", "type": "number", "required": true, "description": "Unix timestamp in milliseconds" },
                 { "key": "source", "type": "string", "required": false, "description": "Traffic origin: \'ide\' | \'cli\' | \'api\' | \'browser\'" },
@@ -4069,7 +4139,6 @@ export const AGENT_OPS_CONTEXT = {
                 { "key": "role", "type": "string", "required": false, "description": "Caller\'s RBAC role projected from the principal\'s token" },
                 { "key": "privilege_scope", "type": "array", "required": false, "description": "Privilege-scope strings granted to the caller" },
                 { "key": "identity_type", "type": "string", "required": false, "description": "Principal identity class: \'human\', \'agent\', \'service\', or \'mcp_server\'" },
-                { "key": "principal", "type": "string", "required": false, "description": "Stable principal identifier (ZeroID / WIMSE URI or user id)" },
                 { "key": "agent_trust_level", "type": "string", "required": false, "description": "Agent trust tier: \'untrusted\' | \'low\' | \'verified\' | \'trusted\'" },
                 { "key": "request_id", "type": "string", "required": true, "description": "Unique identifier for this request" },
                 { "key": "timestamp", "type": "number", "required": true, "description": "Unix timestamp in milliseconds" },
@@ -4481,7 +4550,6 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "role", "type": "string", "required": false, "description": "Caller\'s RBAC role projected from the principal\'s token (AARM R6 / CAP-IDN-011), e.g. finance_lead. Absent when the token carries no role claim." },
                 { "key": "privilege_scope", "type": "array", "required": false, "description": "Privilege-scope strings granted to the caller, projected from the token (AARM R6 / CAP-IDN-011), e.g. transfer:approve. Absent when the token carries no claim." },
                 { "key": "identity_type", "type": "string", "required": false, "description": "Principal identity class projected from the token: \'human\', \'agent\', or \'service\'. Use to apply identity-class-specific policies" },
-                { "key": "principal", "type": "string", "required": false, "description": "Stable principal identifier projected from the token (e.g. a ZeroID / WIMSE URI or user id). Absent when the token carries no principal claim" },
                 { "key": "request_id", "type": "string", "required": true, "description": "Unique identifier for this request, useful for audit trails and debugging" },
                 { "key": "timestamp", "type": "number", "required": true, "description": "Unix timestamp in milliseconds when the request was processed" },
                 { "key": "direction", "type": "string", "required": true, "description": "Content flow direction: \'input\' for user prompts, \'output\' for AI responses. Use this to apply different policies to inputs vs outputs (e.g., block PII only in outputs)" },
@@ -4592,7 +4660,6 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "role", "type": "string", "required": false, "description": "Caller\'s RBAC role projected from the principal\'s token (AARM R6 / CAP-IDN-011), e.g. finance_lead. Absent when the token carries no role claim." },
                 { "key": "privilege_scope", "type": "array", "required": false, "description": "Privilege-scope strings granted to the caller, projected from the token (AARM R6 / CAP-IDN-011), e.g. transfer:approve. Absent when the token carries no claim." },
                 { "key": "identity_type", "type": "string", "required": false, "description": "Principal identity class projected from the token: \'human\', \'agent\', or \'service\'. Use to apply identity-class-specific policies" },
-                { "key": "principal", "type": "string", "required": false, "description": "Stable principal identifier projected from the token (e.g. a ZeroID / WIMSE URI or user id). Absent when the token carries no principal claim" },
                 { "key": "request_id", "type": "string", "required": true, "description": "Unique identifier for this request, useful for audit trails and debugging" },
                 { "key": "timestamp", "type": "number", "required": true, "description": "Unix timestamp in milliseconds when the request was processed" },
                 { "key": "direction", "type": "string", "required": true, "description": "Content flow direction: \'input\' for user prompts, \'output\' for AI responses. Use this to apply different policies to inputs vs outputs (e.g., block PII only in outputs)" },
@@ -4703,7 +4770,6 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "role", "type": "string", "required": false, "description": "Caller\'s RBAC role projected from the principal\'s token (AARM R6 / CAP-IDN-011), e.g. finance_lead. Absent when the token carries no role claim." },
                 { "key": "privilege_scope", "type": "array", "required": false, "description": "Privilege-scope strings granted to the caller, projected from the token (AARM R6 / CAP-IDN-011), e.g. transfer:approve. Absent when the token carries no claim." },
                 { "key": "identity_type", "type": "string", "required": false, "description": "Principal identity class projected from the token: \'human\', \'agent\', or \'service\'. Use to apply identity-class-specific policies" },
-                { "key": "principal", "type": "string", "required": false, "description": "Stable principal identifier projected from the token (e.g. a ZeroID / WIMSE URI or user id). Absent when the token carries no principal claim" },
                 { "key": "request_id", "type": "string", "required": true, "description": "Unique identifier for this request" },
                 { "key": "timestamp", "type": "number", "required": true, "description": "Unix timestamp in milliseconds" },
                 { "key": "tool_name", "type": "string", "required": false, "description": "Name of the tool being called (e.g., \'shell\', \'write_file\', \'http_post\'). Use this to block specific dangerous tools" },
@@ -4825,7 +4891,6 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "role", "type": "string", "required": false, "description": "Caller\'s RBAC role projected from the principal\'s token (AARM R6 / CAP-IDN-011), e.g. finance_lead. Absent when the token carries no role claim." },
                 { "key": "privilege_scope", "type": "array", "required": false, "description": "Privilege-scope strings granted to the caller, projected from the token (AARM R6 / CAP-IDN-011), e.g. transfer:approve. Absent when the token carries no claim." },
                 { "key": "identity_type", "type": "string", "required": false, "description": "Principal identity class projected from the token: \'human\', \'agent\', or \'service\'. Use to apply identity-class-specific policies" },
-                { "key": "principal", "type": "string", "required": false, "description": "Stable principal identifier projected from the token (e.g. a ZeroID / WIMSE URI or user id). Absent when the token carries no principal claim" },
                 { "key": "request_id", "type": "string", "required": true, "description": "Unique identifier for this request" },
                 { "key": "timestamp", "type": "number", "required": true, "description": "Unix timestamp in milliseconds" },
                 { "key": "path", "type": "string", "required": false, "description": "File path being read. Use for path-based access control policies (e.g., block .env files, system directories, credential directories)" },
@@ -4870,7 +4935,6 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "role", "type": "string", "required": false, "description": "Caller\'s RBAC role projected from the principal\'s token (AARM R6 / CAP-IDN-011), e.g. finance_lead. Absent when the token carries no role claim." },
                 { "key": "privilege_scope", "type": "array", "required": false, "description": "Privilege-scope strings granted to the caller, projected from the token (AARM R6 / CAP-IDN-011), e.g. transfer:approve. Absent when the token carries no claim." },
                 { "key": "identity_type", "type": "string", "required": false, "description": "Principal identity class projected from the token: \'human\', \'agent\', or \'service\'. Use to apply identity-class-specific policies" },
-                { "key": "principal", "type": "string", "required": false, "description": "Stable principal identifier projected from the token (e.g. a ZeroID / WIMSE URI or user id). Absent when the token carries no principal claim" },
                 { "key": "request_id", "type": "string", "required": true, "description": "Unique identifier for this request" },
                 { "key": "timestamp", "type": "number", "required": true, "description": "Unix timestamp in milliseconds" },
                 { "key": "path", "type": "string", "required": false, "description": "File path being written. Use for path-based blocking policies (e.g., block writes to .env files, credential directories)" },
@@ -4917,7 +4981,6 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "role", "type": "string", "required": false, "description": "Caller\'s RBAC role projected from the principal\'s token (AARM R6 / CAP-IDN-011), e.g. finance_lead. Absent when the token carries no role claim." },
                 { "key": "privilege_scope", "type": "array", "required": false, "description": "Privilege-scope strings granted to the caller, projected from the token (AARM R6 / CAP-IDN-011), e.g. transfer:approve. Absent when the token carries no claim." },
                 { "key": "identity_type", "type": "string", "required": false, "description": "Principal identity class projected from the token: \'human\', \'agent\', or \'service\'. Use to apply identity-class-specific policies" },
-                { "key": "principal", "type": "string", "required": false, "description": "Stable principal identifier projected from the token (e.g. a ZeroID / WIMSE URI or user id). Absent when the token carries no principal claim" },
                 { "key": "request_id", "type": "string", "required": true, "description": "Unique identifier for this request" },
                 { "key": "timestamp", "type": "number", "required": true, "description": "Unix timestamp in milliseconds" },
                 { "key": "mcp_server", "type": "string", "required": false, "description": "Name of the MCP server being connected to (e.g., \'github\', \'filesystem\', \'slack\'). Use this to allow or block specific MCP servers" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@highflame/policy",
-  "version": "2.2.42",
+  "version": "2.2.43",
   "engines": {
     "node": ">=18"
   },